Profile avatar
damian.social
Architect | SOD/EDA | DDD | SaaS | Chief Architect & Engineering Director @DuendeSoftware | Recovering OSS contributor. Mostly. NET and dable in other ecosystems. Rugby.
404 posts 640 followers 465 following
Regular Contributor
Active Commenter

In recent weeks, some of our customers reported performance degradations. You won't believe what happened next 😱 Clickbait aside, #efcore, SqlClient, and transient retries don't always go well together. More on our blog! duende.link/1khti3w #dotnet #identityserver #azure

Microsoft.Data.SqlClient is such a tire fire of a package lol

Just did a big rewrite of a docs page on dynamic identity providers in @duendesoftware.com #identityserver. That was fun to dive in, and makes me appreciate the thought put in to designing both #aspnetcore and IdentityServer itself. docs.duendesoftware.com/identityserv... #dotnet #security #oauth

Been studying AspNet Identity and... I don't like it. Not one bit. That UserManager is an absolute beast. Service location, dubious non-transactional operations, exception based flow of control etc. My inner DDD is screaming.

Kicking off our Open Source Sponsorship program this quarter, where our developers picked a project we'll sponsor for 12 months: πŸ™Œ Shouldly Assertion Framework We're using it ourselves, and here's why you may want to: duende.link/w4whryh #dotnet #testing

Using VSCode Agent mode (Copilot, Sonnet3.7) I attempted to "vibe" code a small library to handle the Cache-Status header (RFC9211) in C#/AspNetCore to see what all the fuss was about. It was a disaster. Used/retained zero of the output.

Fresh Duende.AccessTokenManagement release candidate! πŸ”‘ Named keys for IDistributedCache injection πŸ’Έ HybridCache (preview) πŸ“Š Open Telemetry metrics, logs and traces πŸ•οΈ Externalized cache key generation πŸŽ‰ and more! github.com/DuendeSoftwa... #dotnet #oidc #security

Secure your #VueJS apps with OpenID Connect & the BFF pattern! πŸ”’ We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together. duende.link/eshdrq4 #Security #OAuth2 #OpenIDConnect #dotnet

Companies won't do shit mate.

Reviving LibLog as a commercial product BRB.

A common attack web devs need to guard against is Cross-Site Request Forgery (CSRF). πŸ¦Έβ€β™€οΈ Anti-Forgery tokens to the rescue! Let's see how they work in more detail πŸ‘‡ duende.link/wk7e6sg #dotnet #aspnetcore

Most expensive laptop ever?

Blogged: Creating provenance attestations for NuGet packages in GitHub Actions andrewlock.net/creating-pro... In this post I discuss software provenance, what attestations are for, how they work, how to create an attestation for a NuGet package, and why that doesn't really workπŸ˜… #dotnet #security

Youtube comment's 'topics' has to be the dumbest application of AI I've seen thus far.

OSS is not and never will be 'sustainable'. It's always funded and there is always a narrative. And if you are genuinely doing it, use one of the GPL licences.

SAST tools can be so noisy and dumb.

Fiefox nightly actully has a usable profile switcher omg.

Say hello to Duende BFF Security Framework V3 Release Candidate 1 πŸ‘‹ BFF (Backend-For-Frontend) solves security and development challenges for client-side developers using SPA frameworks like #React, #Angular, VueJs or #Blazor. duende.link/bff3rc1 #dotnet #identity #oauth

KveΓ°ja from the OAuth Security Workshop 10 in Reykjavik. Duende is proud to sponsor. #osw10